diff --git a/build/build.php b/build/build.php
index e635c9e20..f0696abb3 100755
--- a/build/build.php
+++ b/build/build.php
@@ -174,12 +174,16 @@ private function buildFromSource()
 
         putenv("COMPOSER_ALLOW_SUPERUSER=1");
 
-
-        $composerFiles = run("find . composer.json -type f");
+        cd($this->buildDir . "/" . $this->packageName);
+        $composerFiles = run("find . -name composer.json -type f -not -path '*/vendor/*'");
 
         foreach ($composerFiles as $composerFile) {
+
+            echo $composerFile . "\n";
+
             cd(dirname($composerFile));
             run("composer install --no-dev --optimize-autoloader --ignore-platform-reqs");
+            cd($this->buildDir . "/" . $this->packageName);
         }
 
         cd($this->buildDir . "/" . $this->packageName);
@@ -190,7 +194,6 @@ private function buildFromSource()
 			run("sass --no-source-map $sassFile " . dirname(dirname($sassFile)) . '/' . str_replace('scss', 'css', basename($sassFile)));
 		}
 
-
 		// remove sensitive files OWASP WSTG - WSTG-INFO-05
 		run("rm composer.json composer.lock vendor/composer/installed.json");